Solaris 10 如何处理Bash远程任意代码执行安全漏洞？

anfy

哪位大侠知道Solaris 10如何处理Bash远程任意代码执行安全漏洞呢？

我用pkgutil更新的bash，新的bash安装路径是/opt/csw/bin/bash。

安装过程及结果如下：
# /opt/csw/bin/pkgutil -y -i bash
=> Fetching new catalog and descriptions (http://mirror.opencsw.org/opencsw/testing/i386/5.10) if available ...
==> 3746 packages loaded from /var/opt/csw/pkgutil/catalog.mirror.opencsw.org_opencsw_testing_i386_5.10
Solving needed dependencies ...
Solving dependency order ...
7 CURRENT packages:
        CSWcas-texinfo-1.42,REV=2010.11.26
        CSWcommon-1.5,REV=2010.12.11
        CSWggettext-data-0.18.1.1,p,REV=2011.03.15
        CSWiconv-1.14,REV=2011.08.08
        CSWlibcharset1-1.14,REV=2011.08.07
        CSWlibiconv2-1.14,REV=2011.08.07
        CSWlibintl8-0.18.1.1,p,REV=2011.03.15
Install 2 NEW packages:
        CSWbash-4.3.25,REV=2014.09.26 (opencsw/testing)
        CSWcas-etcshells-1.45,REV=2011.07.12 (opencsw/testing)
Total size: 2.1 MB
=> Fetching CSWcas-etcshells-1.45,REV=2011.07.12 (1/2) ...
=> Fetching CSWbash-4.3.25,REV=2014.09.26 (2/2) ...

=> Installing CSWcas-etcshells-1.45,REV=2011.07.12 (1/2) ...
Please see /opt/csw/share/doc/cas_etcshells/license for license information.

Installation of <CSWcas-etcshells> was successful.

=> Installing CSWbash-4.3.25,REV=2014.09.26 (2/2) ...
Please see /opt/csw/share/doc/bash/license for license information.
Installing class <cswetcshells> ...
Creating /etc/shells with default set of shells (see: man shells)
Registering /opt/csw/bin/bash in /etc/shells.
Installing class <cswtexinfo> ...
/opt/csw/share/info/bash.info (texinfo will be registered when CSWtexinfo is installed)

Installation of <CSWbash> was successful.


查看默认的bash版本：
# bash -version
GNU bash, version 3.00.16(1)-release (i386-pc-solaris2.10)
Copyright (C) 2004 Free Software Foundation, Inc.

查看新更新的bash的版本号，出现错误了：
# /opt/csw/bin/bash -version
ld.so.1: bash: 致命的: libc.so.1: 版本`SUNW_1.22.5'未找到(文件 /opt/csw/bin/bash必需的)
ld.so.1: bash: 致命的: libc.so.1: 打开失败: 无此文件或目录
被杀掉

大侠，受累告诉我如何处理这个棘手问题，谢谢指导！

watchsat

You need this:

SunOS 5.10_x86: bash patch (Patch) 126547-07.zip        2.4 MB

zhmg

请问楼上大侠能提供下载地址吗？我的是5.10 sparc平台的，谢谢！

zgq919

给个下载地址，sparc 64bit  多谢！回复 2# watchsat


   

anfy

回复 1# anfy

一个大神的解决方法：
#  LD_NOVERSION=yes
# export LD_NOVERSION


设置环境变量就可以了！

anfy

回复 3# zhmg


    看看这个帖子，有帮助：
   http://blog.chinaunix.net/uid-113269-id-4533739.html

anfy

回复 4# zgq919


    看看这个帖子，不知道对你的问题有帮助没有：
   http://blog.chinaunix.net/uid-113269-id-4533739.html

zhmg

我全部装完之后，运行报错，请各位大侠帮忙看看，非常感谢！
jinjq# ls -ltr
total 28418
-rw-r-----   1 jinjq other     574464 Dec 26 13:03 now
-rw-r-----   1 jinjq other     955392 Dec 26 13:10 bash_completion-2.1,REV=2014.04.21-SunOS5.10-all-CSW.pkg
-rw-r-----   1 jinjq other    7661056 Dec 26 13:10 bash-4.3.30,REV=2014.10.18-SunOS5.10-i386-CSW.pkg
-rw-r-----   1 jinjq other       7680 Dec 26 13:20 cas_etcshells-1.45,REV=2011.07.12-SunOS5.9-all-CSW.pkg
-rw-r-----   1 jinjq other       7168 Dec 26 13:21 cas_texinfo-1.42,REV=2010.11.26-SunOS5.9-all-CSW.pkg
-rw-r-----   1 jinjq other      22528 Dec 26 13:21 common-1.5,REV=2010.12.11-SunOS5.8-i386-CSW.pkg
-rw-r-----   1 jinjq other    2862592 Dec 26 13:22 ggettext_data-0.18.1.1,p,REV=2011.03.15-SunOS5.9-all-CSW.pkg
-rw-r-----   1 jinjq other      40960 Dec 26 13:22 iconv_stub-1.14,REV=2011.08.08-SunOS5.9-all-CSW.pkg
-rw-r-----   1 jinjq other      69632 Dec 26 13:22 libcharset1-1.14,REV=2011.08.07-SunOS5.9-i386-CSW.pkg
-rw-r-----   1 jinjq other    1979392 Dec 26 13:23 libiconv2-1.14,REV=2011.08.07-SunOS5.9-i386-CSW.pkg
-rw-r-----   1 jinjq other     289280 Dec 26 13:23 libintl8-0.18.1.1,p,REV=2011.03.15-SunOS5.9-i386-CSW.pkg
jxdns02ber# pkgadd -d bash-4.3.30,REV=2014.10.18-SunOS5.10-i386-CSW.pkg

The following packages are available:
  1  CSWbash     bash - A sh-compatible command language interpreter
                 (i386) 4.3.30,REV=2014.10.18

Select package(s) you wish to process (or 'all' to process
all packages). (default: all) [?,??,q]: all

Processing package instance <CSWbash> from </export/home/jinjq/jinjq/bash/bash-4.3.30,REV=2014.10.18-SunOS5.10-i386-CSW.pkg>

bash - A sh-compatible command language interpreter(i386) 4.3.30,REV=2014.10.18

This appears to be an attempt to install the same architecture and
version of a package which is already installed.  This installation
will attempt to overwrite this package.

Please see /opt/csw/share/doc/bash/license for license information.
Using </> as the package base directory.
## Processing package information.
## Processing system information.
   63 package pathnames are already properly installed.
## Verifying package dependencies.
## Verifying disk space requirements.
## Checking for conflicts with packages already installed.
## Checking for setuid/setgid programs.

Installing bash - A sh-compatible command language interpreter as <CSWbash>

## Installing part 1 of 1.
[ verifying class <none> ]
Installing class <cswetcshells> ...
[ verifying class <cswetcshells> ]
Installing class <cswtexinfo> ...
[ verifying class <cswtexinfo> ]

Installation of <CSWbash> was successful.
jinjq# /opt/csw/bin/bash -version
/opt/csw/bin/bash: Invalid argument

cn_lay

有没有补丁的下载链接 求

ahcnpl

下补丁是要有MOS账号的.